- (Topic 5)
When creating a policy, an error was thrown:

Which statement describes the fix for this issue?

1. A. Replace write with create in the capabilities list
2. B. You cannot have a wildcard (" • ") in the path
3. C. sudo is not a capability

Correct Answer: A

- (Topic 1)
From the unseal options listed below, select the options you can use if you're deploying Vault on-premises (select four).

1. A. Certificates
2. B. Transit
3. C. AWS KMS
4. D. HSM PKCS11
5. E. Key shards

Correct Answer: BCDE

- (Topic 1)
During a service outage, you must ensure all current tokens and leases are copied to another Vault cluster for failover so applications don??t need to authenticate. How can you accomplish this?

1. A. Have Vault write all the tokens and leases to a file so you have a second copy of them
2. B. Configure all applications to use the auto-auth feature of the Vault Agent
3. C. Configure Disaster Recovery replication and promote the secondary cluster during an outage
4. D. Replicate to another cluster using Performance Replication and promote the secondary cluster during an outage

Correct Answer: C

- (Topic 4)
A MySQL server has been deployed on Google Cloud Platform (GCP) to support a legacy application. You want to generate dynamic credentials against this MySQL server rather than use static credentials. What Vault secrets engine would you use to accomplish this?

1. A. The GCP secrets engine
2. B. The Identity secrets engine
3. C. The database secrets engine
4. D. The Cubbyhole secrets engine

Correct Answer: C

- (Topic 5)
The vault lease renew command increments the lease time from:

1. A. The current time
2. B. The end of the lease

Correct Answer: A